PIGA-Virt: an advanced distributed MAC protection of virtual systems

摘要: Efficient Mandatory Access Control of Virtual Machines remains an open problem for protecting efficiently Cloud Systems. For example, the MAC protection must allow some information flows between two virtual machines while preventing other those machines. solving these problems, environment guarantee in-depth in order to control that starts a Machine (vm) and finishes another one. In contrast with existing approaches, PIGA-Virt is controlling different levels system. It eases management required security objectives. The approach guarantees objectives flows. supports large range predefined canvas whose efficiency has been demonstrated during ANR Sec&Si challenge. paper shows how advanced confidentiality integrity properties by complex combinations transitive passing through intermediate resources. As far as we know, first operational solution providing protection, addressing requirements inside Moreover, independent underlying hypervisor. Performances scenarios are given KVM